Who holds your details
This policy covers The Door Hero website and its job form. Both are run by an Australian company, which collects and holds the details you send. On this page, "we" and "us" mean The Door Hero.
We don't fit, repair or quote garage doors or gates. That is the work of the door business that takes your job, and it deals with you itself.
Why New Zealand privacy law applies
The Privacy Act 2020 reaches an overseas business for what it does in the course of carrying on business in New Zealand. Taking New Zealand jobs through this site is that kind of business, so the Act and its information privacy principles (IPPs) apply to how we handle your details.
The short notice under IPP 3
- What we are doing: collecting the details you type or tap into the job form.
- The reason: getting your job in front of door businesses, so that one can take it and talk to you about it.
- Who it goes to: the door businesses described under "Who sees what" below, and the service providers behind the job system.
- Who collects and holds it: The Door Hero, which is run by an Australian company.
- Whether you have to give it: no law makes you. Leave out your mobile or postcode, though, and no door business can take the job.
- Your rights: you can ask to see what is held about you and ask for it to be corrected, as set out below.
What we collect
- The job: what kind of job it is, one detail about it (such as the door type and size, whether there is a power point near the ceiling, or the gate type) and whether you marked it urgent.
- Where the job is: your postcode.
- How to reach you: your first name and mobile number, your email if you add it, and any note you write.
- Your agreement: a record of the tick box wording you agreed to.
- Site use: Microsoft Clarity shows us which pages people open and where they tap or scroll, so we can tell which parts of the site are awkward to use. It sets cookies, and the job form's fields are hidden from it.
- The robot check: the contact step has a Google reCAPTCHA tick box. Using it passes some browser details to Google.
Why we collect it
There is one purpose: showing your job to door businesses that cover your area and do that kind of work, and passing your contact details to the one that takes it, so it can arrange a look and a quote.
Along the way, the site checks your mobile number is real, and automated tools read your note to judge the size of the job.
The tick box on the job form
The form's tick box says: "I agree to The Door Hero sharing my details with one local door specialist so they can contact me about this job." Passing your details on is the reason you gave them to us, and the tick is your go-ahead for it, both of which IPP 11 recognises as grounds for sharing them.
Who sees what
Nearby door businesses: those that cover your area and have signed up for your type of job can see the job, your first name and your suburb. They never see your phone number or email at this stage.
The business that takes the job: the first to take it receives your first name, mobile, email and note, and tells you its business name when it gets in touch.
If nobody nearby takes it: after 48 hours, door businesses elsewhere in your region that do that kind of job may be shown it on the same terms.
Only one local door specialist gets your number.
The door business's own copy
The business that takes your job collects your details from us rather than from you. Since 1 May 2026, IPP 3A has generally required a business that collects information that way to tell the person, with an exception where the person already knows the matters it covers. This page and the tick box are how you are told.
That business keeps its own copy as part of its own records. To see, correct or delete that copy, ask the business directly.
Where your details are held
Your details are held in Australia. Some of the service providers that the job system relies on are based in the United States. Microsoft runs Clarity and Google runs reCAPTCHA, and both are among those overseas providers.
Under section 11 of the Act, information that a provider holds only for us, for example for storage or processing, counts as held by us even if the provider is overseas. Sending details to an overseas organisation for its own use is a different matter: IPP 12 allows that only with the safeguards it lists, or with your permission.
Leave these out of your note
- Alarm or gate codes, or where a key is hidden
- When the house will be empty
- Other people's names or numbers, unless they have said yes
Your rights
IPP 6 lets you ask whether an agency holds personal information about you and get access to it, and IPP 7 lets you ask for it to be corrected. An access request has to be answered as soon as reasonably practicable, and no later than 20 working days after it arrives. The Privacy Commissioner says that in most circumstances agencies should not charge for this.
If something goes wrong with your details
If a privacy breach has caused anyone serious harm, or is likely to, the law requires the Privacy Commissioner and the people affected to be told as soon as practicable.
Privacy complaints
Start with the business or organisation holding your details, in writing, and keep a copy: the Privacy Commissioner says it won't accept a complaint if you haven't tried that first. If it isn't sorted out, the next step is the online self-assessment on the Privacy Commissioner's site, privacy.org.nz.
For a problem with the door work itself, go to complaints and disputes.